CVE-2008-0239: Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3...

Security readout for executives and security teams

This CVE covers multiple cross-site scripting flaws in Sun Java System Identity Manager. An attacker could make a user’s browser run attacker-supplied script through specific Identity Manager pages and parameters. The main business concern is compromise of sessions or actions in an identity-management application, especially if administrators use the affected interface. Exposure is likely limited to organizations still running the named Sun Java System Identity Manager versions, particularly where /idm pages are reachable by users or administrators. The bundle does not identify other products or versions. Treat as a targeted legacy identity-system risk. It is not KEV-listed and has no provided CVSS, but compromise of an identity management interface can carry outsized business impact. Prioritize if the product is internet-facing or used by privileged administrators. Mitigation focus: Inventory Sun Java System Identity Manager deployments and confirm exact versions.; Review SunAlert 103180 and 200558 for vendor-approved fixes or workarounds.; Restrict access to /idm administrative and user interfaces where operationally possible..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.